Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'The Internet' disclosed a bug submitted by b'vanhoefm' 
b'Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuse'

03 Nov 2017

b'HackerOne' disclosed a bug submitted by b'exadmin' 
b'Private partial disclosure of h1 infrastructure '

03 Nov 2017

b'Twitter' disclosed a bug submitted by b'yipman' 
b'[CRITICAL] Full account takeover using CSRF'

03 Nov 2017

b'Twitter' disclosed a bug submitted by b'eidelweiss' 
b'Unauthorized Access to Protected Tweets via niche.co API'

02 Nov 2017

b'Twitter' disclosed a bug submitted by b'cornerpirate' 
b"OS Command Execution on User's PC via CSV Injection"

02 Nov 2017

b'Gratipay' disclosed a bug submitted by b'edio' 
b'Saying goodbye to HackerOne and Gratipay.'

02 Nov 2017

b'AlienVault ' disclosed a bug submitted by b'hussain_0x3c' 
b'SQL Injection in AlienVault Product Forums'

02 Nov 2017

b'Gratipay' disclosed a bug submitted by b'edio' 
b'Application-level DoS on image\'s "size" parameter.'

02 Nov 2017

b'WordPress' disclosed a bug submitted by b'jdgrimes' 
b'Unauthenticated hidden groups disclosure via Ajax groups search'

02 Nov 2017

b'WordPress' disclosed a bug submitted by b'skansing' 
b'Buddypress 2.9.1 - Exceeding the maximum upload size - XSS leading to potential RCE. '

02 Nov 2017

b'WordPress' disclosed a bug submitted by b'ysx' 
b'[BuddyPress 2.9.1] Open Redirect via "wp_http_referer" parameter on "bp-profile-edit" endpoint'

02 Nov 2017

b'AlienVault ' disclosed a bug submitted by b'ducnt_' 
b'DOM Based XSS in https://threatcrowd.org'

02 Nov 2017

b'concrete5' disclosed a bug submitted by b'bl4de' 
b"Stored XSS vulnerability in additional URLs in 'Location' dialog [Sitemap]"

02 Nov 2017

b'HackerOne' disclosed a bug submitted by b'nickcas' 
b"View Any Program's Team Members through GET https://hackerone.com/invitations/"

01 Nov 2017

b'HackerOne' disclosed a bug submitted by b'holvonix-advay' 
b'Search query text, including from potentially undisclosed reports, sent to Google Analytics on Inbox query page'

01 Nov 2017

b'Zopim' disclosed a bug submitted by b'irotem2' 
b'XSS with needed user intervention'

01 Nov 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'zk34911' 
b'CSRF to change Account Security Keys on secure.login.gov'

01 Nov 2017

b'Inflection' disclosed a bug submitted by b'anonymousmian' 
b'HTTP Host Header Injection on app.goodhire.com'

01 Nov 2017

b'WordPress' disclosed a bug submitted by b'c0rte' 
b'Missing SSL can leak job token '

01 Nov 2017

b'Inflection' disclosed a bug submitted by b'anonymousmian' 
b'Amount Manipulation Buy Unlimited Credits in just $1.00'

01 Nov 2017

1 ... 525 526 527 528 529 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM